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PROBES: 

pWS - WEB PAGE ACCESS 

pAS - APPLICATION SERVER ACCESS 

pDBS - DATABASE QUERY 

pingR - PING ROUTER 

pingWS - PING WEB SERVER 

pingAS - PING APPUCAHON SERVER 

pingDBS - PING DATABASE SERVER 
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SELECT INITIAL DETECHON AND 
LOCALEATTON PROBE SETS 
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1. GIVEN: 




Probe set P = 




node set X = 




2. Initialize: DPS 
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RND LONGEST PROBE Pi, 
ADD IT TO DPS SET 

i 



L 
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DONE; ^ 
V RETURN DPS J 



REMOVE NODES COVERED BY 
PROBE Pi FROM NODE SET X=X \ 
jXil, Xi2, Xikj WHERE Xij ARE 
NODES INCLUDED IN PROBE Pi 

t ~ 
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UPDATE PROBES IN P: FOR 
EACH PROBE, REMOVE FROM 
ITS PATH NODES NOT IN X 



REMOVE EMPTY PROBES 
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INPUT: 

1. DEPENDENCY MATRIX 

2. PRIOR PROBABIUnES OF 
NODE FAULTS Pr(X) 

3. DPS probe set P = jP^ Pm|, 

nodes X = |Xf,...,Xn| 

i — 
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GUIU) BAYESUN NETWORK BN 
\ 



INITIALIZATION: 

Pa = \i 
Belief(X)=Pr(X), 

S=support of Pr(X) 



ACTIVE PROBE SELECTION: 

FIND Pmax = PROBE IN P\Pa THAT HAS 
MAXIMUM INFORMATION GAIN ABOUT X: 
Pmax " argmaxyjnp^p l{X;Y|Pa) 

i ' 



ACTIVE PROBE EXECUTION: 

Pa = Pa + jPmax! EXECUTE Pmax 

i — 



PROBABILISITC INFERENCE: 

BELIEF UPDATE USING BN: 
BEUEF(X) = Pr(X|Pfl) 





DONE 

RETURN: ACTIVE PROBE SET - Pa, FAULT 
PROBABILITIES - BELIEF(X), 'SUSPICIOUS' 

NODES S = SUPPORT OF BELIEF(X) 
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ONLINE 
PHASE 
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BAYESIAN 




NET MODEL 
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GUI 



PROBE OUTCOMES 
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INFERENCE 
ENGINE 
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ACTIVE PROBE 
MANAGER 



REAL-TIME 
EVENT MANAGER 
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PROBING 
ENGINES 

ri3i^8i: 

J DISTRIBUTED 2^ 
SYSTEM j-J 
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INTERFACE 



